libid3tag/trunk/CVE-2008-2109.patch

   1 --- field.c.orig        2008-05-05 09:49:15.000000000 -0400
   2 +++ field.c     2008-05-05 09:49:25.000000000 -0400
   3 @@ -291,7 +291,7 @@
   4
   5        end = *ptr + length;
   6
   7 -      while (end - *ptr > 0) {
   8 +      while (end - *ptr > 0 && **ptr != '\0') {
   9         ucs4 = id3_parse_string(ptr, end - *ptr, *encoding, 0);
  10         if (ucs4 == 0)
  11           goto fail;